Solved

Errors in Apache log file on Ubunut 8.10 with ISPConfig

Posted on 2009-04-01
5
1,865 Views
Last Modified: 2013-12-20
Below is the tail of my log file. There is no website in /var/www/ so I cannot figure out why something is looking for files there....

Also what does it mean about the cron.php "communication error"?

Thank you!

[Tue Mar 31 19:09:28 2009] [notice] mod_fcgid: call /var/www/mobilek16.net/web/login/index.php with wrapper /var/www/php-fcgi-scripts/web5/.php-fcgi-starter
[Tue Mar 31 19:12:29 2009] [notice] mod_fcgid: call /var/www/ttt.mobilek16.net/web/file.php with wrapper /var/www/php-fcgi-scripts/web3/.php-fcgi-starter
[Tue Mar 31 19:14:59 2009] [notice] mod_fcgid: process 12432 going graceful shutdown, sending SIGTERM
[Tue Mar 31 19:15:05 2009] [notice] mod_fcgid: process /var/www/ttt.mobilek16.net/web/admin/cron.php(12432) exit(communication error), terminated by calling exit(), return code: 0
[Tue Mar 31 19:15:51 2009] [notice] mod_fcgid: process 10222 going graceful shutdown, sending SIGTERM
[Tue Mar 31 19:15:57 2009] [notice] mod_fcgid: process /var/www/ttt.mobilek16.net/web/admin/cron.php(10222) exit(communication error), terminated by calling exit(), return code: 0
[Tue Mar 31 19:30:01 2009] [notice] mod_fcgid: call /var/www/ttt.mobilek16.net/web/admin/cron.php with wrapper /var/www/php-fcgi-scripts/web3/.php-fcgi-starter
[Tue Mar 31 19:57:16 2009] [notice] mod_fcgid: call /var/www/ttt.mobilek16.net/web/file.php with wrapper /var/www/php-fcgi-scripts/web3/.php-fcgi-starter
[Tue Mar 31 20:19:20 2009] [error] [client 74.6.17.180] File does not exist: /var/www/robots.txt
[Tue Mar 31 20:19:20 2009] [error] [client 74.6.17.180] File does not exist: /var/www/calendar
[Tue Mar 31 21:25:55 2009] [error] [client 64.246.165.160] File does not exist: /var/www/robots.txt, referer: http://www.whois.sc/
[Tue Mar 31 22:46:43 2009] [notice] mod_fcgid: call /var/www/ttt.mobilek16.net/web/calendar/overlib.cfg.php with wrapper /var/www/php-fcgi-scripts/web3/.php-fcgi-starter
[Wed Apr 01 03:01:45 2009] [error] [client 208.111.154.16] File does not exist: /var/www/robots.txt
[Wed Apr 01 03:18:11 2009] [error] [client 208.111.154.16] File does not exist: /var/www/robots.txt
[Wed Apr 01 03:18:11 2009] [error] [client 208.111.154.16] File does not exist: /var/www/mod
[Wed Apr 01 03:23:17 2009] [error] [client 91.205.124.19] File does not exist: /var/www/robots.txt
[Wed Apr 01 05:13:59 2009] [error] [client 61.139.105.163] File does not exist: /usr/local/ispconfig/interface/web/fastenv
[Wed Apr 01 05:14:02 2009] [error] [client 61.139.105.163] File does not exist: /var/www/fastenv
[Wed Apr 01 05:33:31 2009] [error] [client 74.6.17.180] File does not exist: /var/www/robots.txt
[Wed Apr 01 05:33:31 2009] [error] [client 74.6.17.180] File does not exist: /var/www/calendar
[Wed Apr 01 05:34:33 2009] [error] [client 77.88.26.25] File does not exist: /var/www/robots.txt
[Wed Apr 01 05:54:43 2009] [error] [client 61.160.217.15] File does not exist: /var/www/intl
[Wed Apr 01 06:06:18 2009] [error] [client 61.160.217.15] File does not exist: /usr/local/ispconfig/interface/web/intl
[Wed Apr 01 06:37:26 2009] [error] [client 216.145.17.190] File does not exist: /var/www/robots.txt, referer: http://www.whois.sc/
[Wed Apr 01 07:34:04 2009] [notice] mod_fcgid: process 19085 going graceful shutdown, sending SIGTERM
[Wed Apr 01 07:34:10 2009] [notice] mod_fcgid: process /var/www/ttt.mobilek16.net/web/admin/cron.php(19085) exit(communication error), terminated by calling exit(), return code: 0
[Wed Apr 01 07:50:07 2009] [notice] mod_fcgid: process 14987 going graceful shutdown, sending SIGTERM
[Wed Apr 01 07:50:13 2009] [notice] mod_fcgid: process /var/www/ttt.mobilek16.net/web/admin/cron.php(14987) exit(communication error), terminated by calling exit(), return code: 0



0
Comment
Question by:smetterd
  • 3
  • 2
5 Comments
 
LVL 29

Expert Comment

by:fosiul01
ID: 24039307
if you check the Ip from server

host 208.111.154.16

you will see those are Search engine ,looking for robot.txt file, which does not exist in your server , hence the log

[Wed Apr 01 03:01:45 2009] [error] [client 208.111.154.16] File does not exist: /var/www/robots.txt
[Wed Apr 01 03:18:11 2009] [error] [client 208.111.154.16] File does not exist: /var/www/robots.txt
[Wed Apr 01 03:18:11 2009] [error] [client 208.111.154.16] File does not exist: /var/www/mod
[Wed Apr 01 03:23:17 2009] [error] [client 91.205.124.19] File does not exist: /var/www/robots.txt

this logs :


[Wed Apr 01 07:34:04 2009] [notice] mod_fcgid: process 19085 going graceful shutdown, sending SIGTERM
[Wed Apr 01 07:34:10 2009] [notice] mod_fcgid: process /var/www/ttt.mobilek16.net/web/admin/cron.php(19085) exit(communication error), terminated by calling exit(), return code: 0
[Wed Apr 01 07:50:07 2009] [notice] mod_fcgid: process 14987 going graceful shutdown, sending SIGTERM
[Wed Apr 01 07:50:13 2009] [notice] mod_fcgid: process /var/www/ttt.mobilek16.net/web/admin/cron.php(14987) exit(communication error), terminated by calling exit(), return code: 0

whats is in cron.php ??

can you shutdown the server  or apache via ispconfig ?? then isp config must of create those logs..
0
 
LVL 2

Author Comment

by:smetterd
ID: 24039474
It's Moode cron

"Cron assists some of Moodle's modules to perform tasks on a scheduled basis. For example, the cron process might tell Moodle to check all discussion forums so it can mail out copies of new posts to people who have subscribed to that forum.

The primary Moodle script that does all this is located in the admin directory, and is called cron.php. However, it can not tell itself to run, so you need to set up a mechanism where this script is run regularly (eg every five or ten minutes). This provides a "heartbeat" so that the script can perform functions at periods defined by each module. This kind of regular mechanism is known as a cron service. The service can be part of a webhost or can be something run from a different server or computer. "
0
 
LVL 29

Expert Comment

by:fosiul01
ID: 24039512
ok,
so do you have any scheduled running to run that cron.php ??
0
 
LVL 2

Author Comment

by:smetterd
ID: 24049168
Yes, I am running it every 30 minutes, but from the end-users' standpoint it seems to be working fine...
0
 
LVL 29

Accepted Solution

by:
fosiul01 earned 500 total points
ID: 24049843
then cron.php via cron job is making those entry

here i would not say its a hacking issue. beause it been established that those logs are comming from your own pc.

and i have explained about the other logs which is comming from searchengine base web site.

0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now